Forensic Investigation of Emails Altered on the Server | SANS DFIR Summit 2019 

Just caught your fantastic Forensic Investigation talk. Ever given FilterBounce a shot? It is like having an ace up your sleeve for email verification and lead generation, plus their api is perfect for contact form verification. Changed the game for me! Keep up the great work, SANS!

If a client asked me to "preserve" a random selection of emails without a seemingly good reason, I would expect to be deposed a few years later.

catching stupid mother.... blessing , is still fun to do 🤣🤣

or you can catch it from a web cache server , with a proxy 👽👻